>-----Original Message----- >From: Bob Apthorpe [mailto:[EMAIL PROTECTED] >Sent: Wednesday, May 19, 2004 8:55 PM >To: SATalk >Subject: Near-miss (entities, ninjas, and the Brandon Wheat Kings...) > > >Hi, > >I'm not usually one to report near-misses but I'm curious. I >have a spam >that scores as: > >---- >Content analysis details: (8.7 points, 6.3 required) > *snip* > >meaning it would've snuck by without the use of the Weeds ruleset (is >weeds or equivalent available via rules_du_jour anymore?) Bayes didn't >tag it, nor did the SURBL. >
SA 3.0 should make this much better. >There's a lot of junk text, complete, normal, and irrelevant sentences >in the text/plain part; the text/html part contains tons of >numerically-encoded entities, including the following: > ><A >href="http://Gabriel.o *snip* Yup, this is hopefully going to be decoded properly in SA 3.0. Making our lives that much nicer. > >Question #0: Does _anything_ render that? Why? MS. Outlook. Because it was coded by monkey drones. > >Question #1: Isn't there a ruleset in 2.63 (stock or SARE) that flags >such exhuberant use of entities? Just weeds. > >Question #2: How long until *.oem-licensed-soft.biz is blackholed to >hell and back? I'm going to start my own little crusade now. ;) > >Question #2a: Is this a candidate for BigEvil? And if the answer to #1 >is "no." then does anyone want the original for Ninja practice? (Paging >the Hockey Freak Ninja "SIEVE! SIEVE!"[1]) I would love to see the original, off list. I will add them to BE, but it would have made no difference here. Until 3.0 comes out, weeds is the only thing to catch this. I'll see if SARE has any fresh ideas on it. > >-- Bob > >[1] My money's on the Brandon Wheat Kings even though everyone >we met in >Vancouver was so nice to us - even the cops! I'll admit I had to google them. I don't follow CHL or WHL. But I've read about some of those canadien leagues. Hell yeah, more like a 10 man boxing match! But it looks like Calgary may rise to the top this year. --Chris (He shots........wide....very wide!)
